CVE-2015-7825

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

CVE-2015-7825

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

Code injection

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

CVE-2015-7825

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service infinite loop and memory consumption via a certificate with a loop in the certificate chain...

CVE-2015-7825

Removed by vendor...

Apple Music for Android Certificate Validation Information Leakage Vulnerability

Apple Music is another new addition to the popular music scene introduced by Apple. Based on previous experience Apple Music may only work on Apple devices. Apple Music for Android has an information leakage vulnerability. An attacker can exploit the vulnerability to gain access to sensitive...

Trend Micro Enterprise Mobile Security Android Application Man-in-the-Middle Attack Vulnerability

Trend Micro Enterprise Mobile Security Android Application is a mobile security suite. Versions of Trend Micro Enterprise Mobile Security Android Application prior to 9.7.1193 lack SSL certificate validation, which could allow an attacker to perform a man-in-the-middle attack and present a forged...

MGASA-2017-0102 Updated pidgin packages fix security vulnerability

A server controlled by an attacker can send an invalid XML that can trigger an out-of-bound memory access. This might lead to a crash or, in some extreme cases, to remote code execution in the client-side CVE-2017-2640. The pidgin package has been updated to version 2.12.0, which fixes this issue...

Updated pidgin packages fix security vulnerability

A server controlled by an attacker can send an invalid XML that can trigger an out-of-bound memory access. This might lead to a crash or, in some extreme cases, to remote code execution in the client-side CVE-2017-2640. The pidgin package has been updated to version 2.12.0, which fixes this issue...

About the security content of Apple Music 2.0 for Android - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of Apple Music 2.0 for Android

About the security content of Apple Music 2.0 for Android This document describes the security content of Apple Music 2.0 for Android. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

MODX Revolution Reflective Cross-Site Scripting Vulnerability (CNVD-2017-04879)

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A security vulnerability exists in the update and package-installation functions of MODX Revolution...

CVE-2016-9319

There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398...

CVE-2016-9319

There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398...

Design/Logic Flaw

There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398...

CVE-2016-9319

The CVE-2016-9319 entry concerns Trend Micro Enterprise Mobile Security for Android. Connected sources confirm that versions prior to 9.7.1193 lack SSL certificate validation, enabling potential Man-in-the-Middle attacks (MITM) by presenting forged certificates (VRTS-398). Impact is described as ...

cURL: Certificate validation error

Background cURL is a tool and libcurl is a library for transferring data with URL syntax. Description cURL and applications linked against libcurl support “OCSP stapling”, also known as the TLS Certificate Status Request extension using the CURLOPTSSLVERIFYSTATUS option. When telling cURL to use...

GLSA-201703-04 : cURL: Certificate validation error

The remote host is affected by the vulnerability described in GLSA-201703-04 cURL: Certificate validation error cURL and applications linked against libcurl support OCSP stapling, also known as the TLS Certificate Status Request extension using the CURLOPTSSLVERIFYSTATUS option. When telling cURL...

Fedora 25 : empathy (2017-bd15ca5490)

Fix certificate validation to work without legacy CAs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

OPENSUSE-SU-2017:0792-1 Security update for mbedtls

This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1...